vote-sceptre[.]icu

Analysis of the domain vote-sceptre.icu indicates a confirmed phishing operation targeting cryptocurrency staking services, as evidenced by its infrastructure and threat intelligence data. Registered on April 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain currently resolves to the IP address 104.21.60.247, which is associated with Cloudflare infrastructure. The page title, 'Sceptre Liquid Staking | Stake on Flare and Partisia,' suggests an attempt to impersonate a legitimate liquid staking platform, though no direct confirmation of the targeted brand's legitimacy or affiliation is available from the provided data. The domain is flagged by 10 of 95 security vendors on VirusTotal and appears on four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. AlienVault OTX lists the domain in 23 threat intelligence pulses, further corroborating its malicious classification. The site employs technologies such as Wix, React, Google Cloud, RequireJS, Lodash, HSTS, Google Cloud CDN, and Cloudflare Browser Insights, which are consistent with modern web applications but do not inherently indicate legitimacy. The SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious sites. Gridinsoft assigns the domain a trust score of 0/100, reinforcing its high-risk status. Defenders should treat this domain as an active threat, particularly for users of cryptocurrency staking platforms. Blocking access at the network level and monitoring for related indicators of compromise (IOCs) is recommended. While the exact content and functionality of the site remain unanalyzed, the combination of registration details, hosting infrastructure, and threat intelligence confirms its classification as a phishing domain targeting financial services in the cryptocurrency sector.